Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File:                     JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier:          GfrI8kUwtTnMNAahCkWqEdjNiRexG0cKchy5uyYgU7k=
Subject key identifier:   E7:7E:CB:76:00:A9:07:A9:8C:69:A8:37:40:D2:77:F3:5C:8C:44:E6
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer:       /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial:       019D2696424B561A8EF98538D5BCE27BB913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number:          05EA
Signing time:             Wed 25 Mar 2026 20:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:14 +0000
Files and hashes:         1: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: QY9ny12YL2Nyx7AipfEz4QZNw9rFJkTtM3qhYb9W2Fg=)
                          2: g84cD1l0NIWiAh0qYxQZFWYbDew.roa (hash: 3YtnarT57s4PMZl4o0PMkx+Dnjlo0jMzpQu5PPXZZnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:42:4b:56:1a:8e:f9:85:38:d5:bc:e2:7b:b9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
        Validity
            Not Before: Mar 25 20:01:14 2026 GMT
            Not After : Mar 26 20:01:14 2026 GMT
        Subject: CN=e77ecb7600a907a98c69a83740d277f35c8c44e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:6f:c6:bb:50:00:d6:24:e4:e7:2e:ed:53:
                    64:cb:60:a7:c4:7b:b3:56:52:af:4a:82:60:73:e5:
                    19:da:1e:51:4e:f2:39:ab:61:ef:7c:fb:44:95:8f:
                    51:8d:70:32:f2:75:dd:c7:94:91:17:37:21:49:dc:
                    73:b9:17:2d:aa:1e:11:bc:f7:01:c3:61:8b:ef:85:
                    e4:f7:3c:9a:e9:fd:2a:a1:8c:f4:e6:ec:b9:c7:95:
                    d5:0d:54:71:66:8f:0f:ad:52:5e:f1:7e:3f:16:b4:
                    31:1f:83:db:d5:5d:5c:91:77:33:a2:a4:9a:5a:90:
                    ff:b7:a7:fb:b0:a9:b9:f5:71:d6:03:10:77:52:ed:
                    69:0d:51:47:f0:3b:a8:d6:08:02:0d:75:58:03:2b:
                    a3:db:fb:1f:dd:d0:a0:43:27:90:08:42:51:ca:d7:
                    b3:f4:a1:d3:d6:2e:8b:68:28:de:94:61:2e:56:a9:
                    fe:bf:c8:6a:14:dd:68:86:43:1c:04:66:71:4c:ad:
                    0c:50:ad:ad:87:dd:e7:b1:65:13:f7:5c:7a:27:07:
                    17:c4:f2:64:ea:0c:67:b7:65:71:8e:b0:59:50:71:
                    4e:04:54:43:93:80:db:db:16:0f:f1:2e:0b:46:a0:
                    29:f0:1d:f4:8a:a3:47:91:75:9c:db:d2:0f:83:4f:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7E:CB:76:00:A9:07:A9:8C:69:A8:37:40:D2:77:F3:5C:8C:44:E6
            X509v3 Authority Key Identifier:
                keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:ee:42:01:30:66:b5:c3:87:77:85:7c:a8:36:0b:72:a3:
         94:8d:4e:91:00:fa:4e:d4:23:c9:a8:31:76:be:17:2b:55:90:
         9a:e6:65:0c:c0:e4:7d:ac:bf:c0:5b:21:2e:c2:ec:36:45:a5:
         84:44:00:13:0c:9b:94:a1:0c:90:56:30:a7:1a:90:94:9b:20:
         fe:c9:97:6c:9b:f2:f4:80:59:dd:c3:1f:37:e6:eb:22:4d:f8:
         ad:38:df:4f:fa:9e:58:6d:95:04:2a:3b:8f:38:53:97:cd:ba:
         fb:58:2e:0c:bf:e3:b4:20:6b:06:ff:35:32:0d:aa:4b:32:5c:
         3c:a0:89:66:3c:71:cf:67:a2:1e:ab:07:db:42:7a:e9:19:10:
         99:47:61:b7:ca:ee:cd:5e:d4:84:42:61:99:7d:b7:09:d1:e5:
         22:13:fa:a8:be:a2:57:82:74:ee:e7:39:dd:25:d9:e5:a4:6d:
         b4:25:2e:8a:a4:3a:d4:b1:39:70:b2:b8:c2:fc:4c:3a:78:5c:
         24:63:06:b1:26:25:c0:ca:83:66:5f:fc:dd:42:78:45:c2:58:
         66:77:98:89:cb:0e:a7:87:b1:40:e1:98:26:1e:61:7e:e4:88:
         aa:2f:0d:ab:5a:d8:22:d4:57:22:61:28:8d:b2:9d:80:f8:23:
         dd:f6:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:08 2026 by rpki-client